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AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS : 

1 . (Currently Amended) A cryptographic method in an electronic component during 
which a modular exponentiation of the type x A d is performed, with d an integer exponent of 
m+1 bits, by scanning the bits of d from left to right in a loop indexed by i varying from m to 0 
and calculating and storing in an accumulator (RO), at each turn of rank i, an updated partial 
result equal to x A b(i), b(i) being the m-i+1 most significant bits of the exponent d (b(i) = d m .>j), 
th e m e thod b ei ng charact e ris e d i n that wherein , at the end of a turn of rank i(j) (i = i(0)) 
chosen randomly, a randomisation step E1 is performed during which: 

E1 : a random number z (z = b(i(j)), z = b(i(j)).2\ z = u) is subtracted from a part of the 
bits of d not yet used (dM_>o) in the method 

then, after having used the bits of d modified by the randomisation step E1 , a consolidation 
step E2 is performed during which: 

E2: the result of the multiplication of the content of the accumulator (x A b(i)) by a 
number that is a function of x A z stored in a register (R4-) is stored (R0 < R1xR0) in the 
accumulator (R0). 

2. (Currently Amended) Method according to th e pr e c e d i ng c l a i m claim 1 . in which 
step E1 is repeated one or more times, at the end of various turns of rank i(j) (i = i(0), i = 
i(1), ...) chosen randomly between 0 and m. 

3. (Currently Amended) Method according to th e pr e c e d i ng cla i m claim 2 , in which, 
at each turn i, it is decided randomly (p~1) whether or not step E1 is performed. 

4. (Currently Amended) A cryptographic method according to on e of cla i ms 1 to 3 
claim 1 , in which the number z (z=b(i(j)), z = b(i(J)).2 T ) is a function of the exponent d, in 
which, during the randomisation step, the result of the multiplication of the content of the 
accumulator (x A b(i)) by the content of the register (R4-) is also stored (R1 < - R0xR1) in the 
said register (R4}. 
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5. (Original) A method according to claim 4, in which the consolidation step E2 is 
performed after the last turn of rank i equal to 0. 

6. (Currently Amended) A method according to tho procoding c l a i m claim 5 . during 
which, during step E1, the number b(i) is subtracted from d. 

7. (Original) A method according to claim 6, during which the following is effected: 
Input: x, d = (d m ,...,d 0 ) 2 

Output: y = x A d mod N 

R0 <- 1 ; R1 <-1 ; R2 <- x, i <- m 
as long as i > 0, do: 

R0 <- ROxRO mod N 

if dj = 1 then R0 <- R0xR2 mod N 

P<- R{0, 1} 

if ((p = 1 ) and d M ^o ^ d m _>j then 
d <r~ d - d m _>j 
R1 <- R1xR0 mod N 

end if 

i <- i-1 
end as long as 
R0 <- R0xR1 mod N 
return R0 

8. (Currently Amended) A method according to claim 5, during which step E1 is 
modified as follows: 

E1: a number equal to g.b(i) is subtracted from d, g being a positive integer; the 
current partial result (x A b(i)) is raised to the power of g and the result is stored in the register 

9. (Currently Amended) A method according to th e pr e c e d i ng cla i m claim 8 . in which 
g is equal to 2 T , t being a random number chosen between 0 and T. 

10. (Currently Amended) A method according to th e pr e c e d i ng claim 9 , in which the 
following is effected: 

Input: x t d = (d m d 0 ) 2 
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Output: y = x A d mod N 

R0 <- 1 ; R1 <-1 ; R2 <- x, i <- m 
as long as i > 0, do: 

R0 <- ROxRO mod N 

if dj = 1 then R0 <- R0xR2 mod N 

p<- R{0, 1};t<- R{0, ...,T) 

if ((p = 1 ) and (d M ^ x > d m _j)) then 

dj_i_> T <— dj.^x - d m .>j 

R3 <- R0 

as long as (x > 0) do: 

R3 <- R3 A 2 mod N; t <- x-1 

end as long as 

R1 <- R1xR3 mod N 

end if 

i <- i-1 
end as long as 
R0 <- R0xR1 mod N 
return R0 

1 1 . (Currently Amended) A method according to one of cla i ms 1 to 4 claim 1 . in 
which the consolidation step E2 is performed at the end of the rank using the last bit of d 
modified during step E1 . 

12. (Original) A method according to claim 11, in the course of which, during step 
El, the number b(i) is subtracted from the bits of d of rank i(j) - c(j) to iGM. c(j) being an 
integer, and the content of the accumulator (x A b(i(j)) is stored in the register (R1). 

13. (Currently Amended) A method according to th e pr e c e d i ng cl ai m claim 12 , in the 
course of which, during the turn of rank i(j+1 ), it is chosen randomly to perform step E1 only 
if iG + 1 ) ^ »G)-cG) (a ~ 1 fr ee s e maphor e ). 

14. (Currently Amended) A method according to claim 12 or 13 , in which c(j) is equal 
to m-i(j)+1. 
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15. (Currently Amended) A method according to th e pr e c e d i ng c l a i m claim 14 , 
during which the following steps are performed: 

Input: x, d = (d mt ...,d 0 ) 2 
Output: y = x A d mod N 

RO <- 1; R1 <-1; R2 <- x, 
i <- m; c <- -1; a <- 1 
as long as i > 0, do: 

R0 <- ROxRO mod N 
if dj = 1 then R0 <- R0xR2 mod N end if 
if (2i > m+1 ) and (a=1 ) then c <- m-i+1 

if not a = 0 

end if 

P<- R{0, 1} 

e <- p and (dj-i _>j-c > d m _>j) and a 
if e = 1 then 

R1 <- R0; a <- 0 

dj-i -> i-c <_ dj.i _> t-c - d m .>i 

end if 

if c = 0 then 

R0 <- R0xR1 mod N; a <- 1 

end if 

c <- c-1; i <- i-1 
end as long as 
return R0 

16. (Currently Amended) A method according to claim 12 or 13 , in which cQ) is 
chosen randomly between i(j) and m-iG)+1. 

17. (Currently Amended) A method according to the pr e c e d i ng c l a i m claim 16 , 
during which the following is effected: 

Input: x, d = (d m ,...,d 0 )2 
Output: y = x A d mod N 

R0 <-1;R1 <-1;R2 <- x, 

i <- m; c <- -1; a <- 1 
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as long as i > 0, do: 

R0 <- ROxRO mod N 

if d» = 1 then R0 <- R0xR2 mod N 

if (2i>m+1)and (a = 1) 

then c <- R{m-i+1 i} 

if not a = 0 
e <- p and (dM .>j-c > d m ->i) and a 
if e = 1 then 

R1 <- R0; a <- 0 

di-i -> i-c <_ dj_i .> i_c - d m .>i 

end if 

if c = 0 then 

RO <- R0xR1 mod N; a <- 1 

end if 

c <- c-1; i <- i-1 
end as long as 
return RO 

18. (Currently Amended) A method according to one of c l a i ms 1 to 2 claim 1 , in 
which the number z is a number u (z = u) of v bits chosen randomly and independent of the 
exponent d. 

19. (Currently Amended) A method according to th e pr e c e ding c l a i m claim 18 . in 
which, during step E1, the number u is subtracted from a packet w of v bits of d. . 

20. (Currently Amended) A method according to th e prec e d i ng c l a i m claim 19 . 
during which: 

• if H(w-u) + 1 < H(w), it is chosen to perform a randomisation step E1 , 

• if H(w-u) + 1 > H(w), it is chosen not to perform step E1 , 

• if H(w-1 ) + 1 = H(w), it is chosen randomly to perform or not a randomisation 
step E1. 

21 . (Currently Amended) A method according to the pr e c e d i ng c l a i m claim 20 . 
during which the following is effected: 

Input: x, d = (d m ,...,d 0 )2 
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Parameters: v, k 

Output: y = x A d mod N 

R0 <- 1 ; R2 <- x; i <-m; L = {} 
as long as i > 0, do: 

R0 <- ROxRO mod N 
if dj = 1 then RO <- R0xR2 mod N end if 
if i = m mod ((m+1 )/k)) then a<-1 end if 
if a = 1 and L = {} then 

s <-0: u <- R{0, 2 V -1}; 
R1 = x A u mod N 

end if 
w<-di.>i_ v+ i 
h <- H(w) 

if w > u then A <- w-u; h A <- 1 + H(A) 
if not h A <- v+2 

end if 

P<- R{0, 1} 

if [(a=0)A(i-v+1>0)] a 

[(h>h A ) or ((p=1) and (h=h A ))] then 
di->i. v+ i <- A; L <■ /. u {i-v+1} 

end if 

if (i e L) then 

RO <- R0xR1 mod N 
. L<-L\{\} _ 

end if 

i <- i-1 
end as long as 
return RO 



